[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 4 sources · 17 days · First seen · Last updated

ISC BIND software security vulnerabilities

Overview

Security vulnerabilities have been identified in the ISC BIND DNS software. Initial reports from the Internet Systems Consortium (ISC) highlighted several CVEs involving memory safety issues, such as use-after-free errors and null pointer dereferences, as well as resource exhaustion and trust-boundary failures. In Japan, the Information-technology Promotion Agency (IPA) and JPCERT/CC issued advisories regarding these risks.

Subsequent reports from INCIBE identified a specific vulnerability (CVE-2015-5477) in ISC BIND that allows remote attackers to cause a denial of service through TKEY queries in certain versions.

Entities

ISC BIND · Incibe · Internet Systems Consortium · Zyxel · Aruba Networks

Timeline

  1. [TECHNOLOGY] 2 sources
    INCIBE reports vulnerabilities in ISC BIND, Aruba, and ZyXEL products

    INCIBE reports high and critical vulnerabilities in ISC BIND, Aruba Networks, and ZyXEL NAS devices, including risks of remote code execution and denial of service.

  2. [TECHNOLOGY] 2 sources
    ISC BIND software faces multiple security vulnerabilities

    Multiple vulnerabilities, including memory safety and resource exhaustion flaws, have been identified in ISC BIND DNS software, prompting security advisories from ISC and JPCERT/CC.

Sources

dev.to · incibe.es · inteco.es · scan.netsecurity.ne.jp